Security Directory

Z

Zákulisí, z.s.

venuse-ve-svehlovce.cz

51

Divadlo Venuše ve Švehlovce is a small, independent cultural venue and non-profit organization based in Prague, Czech Republic, focused on contemporary live art and theater with an emphasis on original artistic creation and social responsibility. The organization has been active since 2014 and offers a diverse program of theatrical performances, festivals, and community cultural events. The website is professionally designed using WordPress and modern web technologies, providing good user experience and mobile optimization. Privacy and cookie policies are implemented with GDPR compliance, and the site uses Google Analytics for visitor tracking. Security posture is adequate with HTTPS enforced and cookie consent mechanisms, but lacks advanced security headers and explicit incident response information. The absence of WHOIS data reduces domain registration trust, but the website content and contact information support legitimacy. Overall, the site is a credible and well-maintained digital presence for a cultural non-profit.

MDDM Brandýs nad Labem - Stará Boleslav is a local educational and cultural institution providing courses, events, camps, and creative workshops primarily targeting children and youth in the Brandýs nad Labem-Stará Boleslav region of the Czech Republic. The organization operates as a non-profit entity with strong community ties and partnerships with local government and cultural organizations. The website reflects a well-maintained digital presence with clear navigation and relevant content for its audience. Technically, the site uses a modern tech stack including Bootstrap, jQuery, and various UI libraries, and is mobile optimized with lazy loading for images. Security posture is adequate with HTTPS enforced and cookie consent implemented, though it lacks advanced security headers and a formal privacy policy page. WHOIS data is missing, which raises some concerns about domain registration transparency, but the active and professional website presence mitigates this risk to some extent. Overall, the site is trustworthy and serves its community well, but could improve compliance and security practices.

The website 'Bezpečné Brandýsko' serves as an official local government portal for public safety information in Brandýs nad Labem - Stará Boleslav, Czech Republic. It provides residents and visitors with updates and resources related to municipal police, Czech Police, fire brigade, social prevention, and traffic safety. The site is positioned as a trusted source for local safety news and community alerts. Technically, the site is built on WordPress with common plugins and frameworks such as Bootstrap and jQuery, and it employs Google reCAPTCHA for form security. While the site uses HTTPS and has a professional design, it lacks visible security headers and formal privacy or cookie policies, which are important for compliance and user trust. The absence of WHOIS data reduces domain registration transparency, but the presence of official contact phone numbers and local government branding supports legitimacy. Overall, the site is functional and serves its public service purpose effectively but could improve in security and compliance areas.

C

Cortijo Social Media

cortijosocialmedia.com

55

Cortijo Social Media is a Spanish communication agency established since 1996, offering services including public relations, event organization, audiovisual production, branding, and communication consulting. The website presents a professional image with clear navigation and good content quality, targeting institutions and companies seeking communication support. Technically, the site is built on WordPress with Bootstrap and jQuery, providing moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled but lacks security headers and explicit privacy or incident response policies. The absence of WHOIS data and domain registration transparency raises concerns about domain legitimacy. Overall, the site is functional and professional but would benefit from enhanced security and privacy compliance measures.

A

Artisan Financial Planning

artisanfinancialplanning.com

60

Artisan Financial Planning is a specialized financial advisory firm offering flat-fee financial planning and investment management services tailored specifically for musicians, performing artists, and creatives. The company positions itself as an affordable, transparent, and client-aligned alternative to traditional asset-based fee advisors, emphasizing simplicity and empathy in its service delivery. The website content is professionally crafted, targeting a niche market segment with clear messaging and trust signals such as professional certifications and media features. Technically, the website is built on a modern stack including jQuery, Bootstrap, Font Awesome, and Zephyr CMS. It integrates marketing and analytics tools such as Google Tag Manager, MailerLite, and Plausible Analytics, indicating a moderate level of digital maturity. The site is mobile optimized and provides a good user experience with clear navigation and professional design. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks several recommended security headers and does not provide a cookie consent mechanism, which could impact privacy compliance. The absence of WHOIS registration data is a notable anomaly that reduces trustworthiness, though the professional presentation and certifications mitigate some concerns. Overall, the website presents a low-risk profile with room for improvement in privacy compliance and security hardening. Strategic recommendations include implementing security headers, adding cookie consent, publishing incident response policies, and clarifying domain registration details to enhance trust and compliance.

O

Objective Wealth

objectivewealthfp.com

63

Objective Wealth is a small financial advisory firm specializing in tax-conscious comprehensive financial planning and investment management. The website presents a professional image with clear descriptions of services including financial and retirement planning, investment management, tax planning and preparation, and small business retirement plans. The firm targets individuals and small businesses seeking personalized financial guidance. The website is built on a modern technical stack including jQuery, Bootstrap, FontAwesome, and uses Zephyr CMS. Tracking technologies such as Google Tag Manager and Facebook Pixel are implemented for analytics and marketing purposes. Security posture is moderate with HTTPS usage implied, but lacks visible security headers and explicit privacy or cookie policies, which are critical for compliance and trust. The absence of WHOIS data for the domain raises concerns about domain registration legitimacy and reduces overall trust. No forms or direct contact information were found in the provided content, limiting user engagement options. Overall, the website is functional and professional but would benefit from enhanced security practices, privacy compliance, and verified domain registration information.

W

wowyup

wowyup.agency

45

The website wowyup.agency represents a small digital agency offering services such as digital marketing, product photography, and web presentations. The site is minimalistic with limited content and lacks detailed business or contact information, which constrains its market positioning and trust signals. Technically, the site uses standard web technologies including HTML5, CSS, JavaScript, jQuery, Bootstrap, and some animation libraries like Velocity.js and PhotoSwipe for galleries. However, the site lacks advanced SEO, accessibility, and performance optimizations. Security posture is weak due to absence of visible security headers and no evidence of HTTPS enforcement from the provided data. Privacy and cookie policies are missing, and no contact or incident response information is available, which impacts compliance and user trust. WHOIS data is privacy protected by Identity Digital, which is common for small agencies but limits transparency. Overall, the site is functional but basic, with room for significant improvements in security, compliance, and business credibility.

D

David Chelly

davidchelly.com

38

David Chelly is a digital entrepreneur specializing in domain names, website monetization, and web strategy with over 25 years of internet experience. The website presents a professional portfolio of services including management of a large network of websites, domain consulting, publishing, and event organization. The business targets internet professionals, domain investors, and web marketing audiences primarily in France and internationally. Technically, the site uses a modern front-end stack with Bootstrap and popular JavaScript libraries, providing a responsive and user-friendly experience. However, the site lacks visible privacy and cookie policies, contact information, and security headers, which impacts compliance and trust. The WHOIS data is unavailable, raising concerns about domain registration transparency. Overall, the site is functional and professional but would benefit from enhanced security and compliance measures.

T

TPF Pyramide Ingénierie

tpfpyramide.ma

40

TPF Pyramide Ingénierie is a Moroccan engineering company specializing in multi-disciplinary project management and technical consulting services, including structural engineering, fluids, electricity, project economics, and diagnostics. The company is ISO 9001 certified and operates as part of the larger TPF Group, positioning itself as a trusted local engineering firm. Their website reflects a professional image with clear service offerings and contact information, targeting construction and real estate sectors. Technically, the website employs a modern tech stack with Bootstrap and various JavaScript libraries to enhance user experience. Hosting is provided by Heberjahiz, and the domain registration is consistent and transparent. The site is mobile-optimized and offers good navigation, though SEO and accessibility could be improved. From a security perspective, the site lacks visible security headers and formal privacy or cookie policies, which are compliance gaps. The domain uses HTTPS, but SSL configuration details are unknown. No forms or analytics scripts were detected, indicating minimal data collection and tracking. Incident response and vulnerability disclosure information are absent. Overall, the website is safe and professional but would benefit from enhanced privacy compliance and security hardening to improve trust and regulatory adherence.

iREPORT s.r.o. operates a Czech-language online music and style magazine providing news, concert photo reports, reviews, interviews, video and audio content, exclusive CD/DVD supplements, and contests. The website targets music enthusiasts primarily in the Czech Republic and offers a rich multimedia experience with frequent content updates and an active event calendar. The business model is focused on media publishing with advertising revenue streams and audience engagement through contests and social media. Technically, the website employs a modern tech stack including Bootstrap, jQuery, Font Awesome, Google Fonts, and various tracking and advertising scripts such as Google Analytics, Hotjar, and Rubicon Project. The site is mobile optimized and uses HTTPS with a good SSL configuration. Consent management is implemented via Didomi and CPEX CMP, supporting GDPR compliance. However, the site lacks some advanced security headers and explicit contact or security policy information. From a security perspective, the site demonstrates good practices like HTTPS enforcement and cookie consent but could improve by adding more comprehensive security headers and publishing incident response contacts. The absence of WHOIS data for the domain is a notable concern, reducing trust in domain legitimacy despite the professional appearance and operation of the website. Overall, the website is well-designed, content-rich, and compliant with privacy regulations, but the missing domain registration data and limited security policy transparency present moderate risks. Strategic improvements in security posture and transparency would enhance trust and compliance.

A

ara shoes

ara-shoes.sk

49

ara shoes operates an official e-commerce platform specializing in premium women's footwear and accessories in the Czech Republic. The website showcases a well-structured product catalog with clear branding and a focus on quality and customer convenience, including free shipping and in-store pickup options. Technically, the site is built on PrestaShop with modern frontend technologies and includes structured data for SEO benefits. Security measures include HTTPS and Google reCAPTCHA integration, although some security headers are missing. Privacy compliance is addressed through a cookie consent banner and a basic cookie policy page. However, the absence of WHOIS data and explicit contact information limits full trust assessment. Overall, the site presents a professional and functional online retail experience with moderate technical and security maturity.

Refdomaine.com is a French independent website dedicated to domain name information, offering news, guides, resources, and consulting services primarily targeting French-speaking domain professionals and enthusiasts. The site positions itself as a niche leader in the French domain name information space, with a consistent brand and good content quality. Technically, the site uses common web technologies such as Bootstrap, jQuery, and Font Awesome, hosted on o2switch.net, with moderate performance and good mobile optimization. Security posture is moderate with no detected HTTPS enforcement or security headers, and no cookie consent mechanism, indicating room for improvement in compliance and security best practices. The domain is registered since 2017 with no privacy protection, consistent with the business profile. Overall, the site is professional and trustworthy but would benefit from enhanced security and privacy compliance measures.

N

NDDCamp Alsace

nddcamp.alsace

46

NDDCamp Alsace is a specialized conference event focused on domain names, legal, SEO, marketing, and IT topics, targeting professionals in the domain industry and related fields. The event is organized by recognized experts and supported by reputable sponsors and partners, positioning it as a credible regional event with national and international reach. The website provides detailed information about speakers, program, location, and sponsors, facilitating networking and knowledge sharing. Technically, the site uses modern web technologies such as Bootstrap and jQuery, hosted on o2switch, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled, but lacks DNSSEC and security headers, and no privacy or cookie policies are published, indicating compliance gaps. Overall, the site is professional and trustworthy but would benefit from enhanced privacy compliance and security best practices.

M

Mandai Nature Fund

mandainature.org

61

Mandai Nature is a Singapore-based conservation organization focused on protecting threatened species, restoring ecosystems, and supporting communities in Southeast Asia. Established in 2020 as the conservation arm of Mandai Wildlife Group and funded by Temasek, it operates as a non-profit entity delivering impact through catalyzing conservation programs, building capacity, and convening partnerships. The website is professionally designed using Adobe Experience Manager, with modern technologies and good mobile optimization. Security posture is solid with HTTPS and no exposed sensitive data, but could be improved by adding explicit security headers and cookie consent mechanisms. Privacy policies are comprehensive and GDPR compliant, though cookie policy and incident response information are lacking. WHOIS data is unavailable, which slightly reduces domain trustworthiness, but the website content and external references support legitimacy. Overall, the site scores well on content quality, technical implementation, and business credibility, with room for improvement in privacy compliance and security best practices.

B

Beemob

beemob.fr

56

Beemob operates as the official public transportation service for the Béziers Méditerranée agglomeration in France, providing bus network plans, route itineraries, schedules, ticketing options, and real-time alerts. The website is designed to serve residents and visitors with accessible and relevant transit information, supported by local government. Technically, the site employs modern web technologies including Bootstrap, jQuery, and a cookie consent management system (tarteaucitron.js), hosted on OVH infrastructure with HTTPS enforced. Analytics are handled via ActiSTAT, a privacy-conscious tool that does not set cookies. Security posture is solid with HTTPS and consent mechanisms, though improvements could be made by adding security headers and explicit incident response policies. Overall, the site is professional, trustworthy, and compliant with GDPR requirements, making it a reliable resource for its users.

Déchets Béziers operates as a public service website providing comprehensive information and support for waste management within the Béziers Méditerranée agglomeration in France. The site offers residents and professionals guidance on waste sorting, collection schedules, recycling centers, and waste prevention initiatives. It serves as an official communication channel for local government waste services, positioning itself as a trusted resource in the region. Technically, the website is built on WordPress, leveraging popular plugins such as Yoast SEO, Contact Form 7, and Popup Maker, and uses Bootstrap for responsive design. Hosting is provided by OVH, a reputable provider, and the site enforces HTTPS, ensuring secure communications. The site demonstrates moderate performance and good mobile optimization, with structured data implemented for SEO benefits. From a security perspective, the site benefits from HTTPS but lacks visible security headers such as Content-Security-Policy or HSTS, which are recommended for enhanced protection. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is partial, with a privacy policy present but no evident cookie consent mechanism, which may pose compliance risks under GDPR. Overall, the website is professional, trustworthy, and well-aligned with its public service mission. Strategic improvements in security headers and privacy compliance would enhance its security posture and regulatory adherence.

Z

Zoo Krefeld

zookrefeld.de

47

Zoo Krefeld is a well-established zoological garden in Germany offering a wide range of animal exhibits, educational programs, events, and visitor services such as ticket sales, a zoo shop, and gastronomy. The website reflects a strong community and partner network, including sponsorships and affiliations with recognized zoo associations. Technically, the site is built on TYPO3 CMS with modern web technologies, providing a responsive and accessible user experience. Security posture is solid with HTTPS and cookie consent mechanisms, though it lacks explicit security policies and incident response contacts. Overall, the site is professional, trustworthy, and compliant with GDPR requirements.

B

BLOOM'UP

bloomup.net

51

Bloom'Up is a French accredited domain registrar specializing in the acquisition and resale of recently expired domain names with strong SEO potential. The company offers services such as dropcatching, backorder programming, immediate domain purchase, and auctions, targeting SEO professionals and digital marketers seeking to leverage domain authority and traffic. The website is professionally designed, mobile-optimized, and provides clear business information including contact details and accreditation by AFNIC, enhancing trustworthiness. Technically, the website employs modern front-end technologies including Bootstrap, FontAwesome, and Owl Carousel, ensuring a responsive and visually appealing user experience. While the site uses HTTPS and secure transfer codes for domains, it lacks visible security headers and cookie consent mechanisms, indicating room for improvement in security and privacy compliance. No analytics or tracking scripts were detected, suggesting minimal user tracking. From a security perspective, the site demonstrates a good baseline with HTTPS and secure domain transfer processes. However, the absence of WHOIS data for the domain raises concerns about domain registration legitimacy or recent registration status. No critical vulnerabilities or exposed sensitive data were identified. The site would benefit from enhanced security headers, explicit incident response policies, and GDPR-compliant cookie consent. Overall, Bloom'Up presents a credible and professional business with a niche market focus. The main risk lies in the missing WHOIS data which impacts domain trustworthiness. Strategic recommendations include improving security headers, implementing cookie consent, and publishing detailed security and incident response policies to bolster compliance and user trust.

L

LWS

lws.fr

57

LWS is a well-established French web hosting company founded in 1999, offering a comprehensive range of services including domain registration, shared and dedicated hosting, VPS, WordPress optimized hosting, email solutions, and cloud storage. The company positions itself as a leading French hosting provider with a strong customer base of over 680,000 hosted sites and emphasizes performance, security, and customer support. Their infrastructure is based in France with ISO 27001 certified datacenters, ensuring data sovereignty and compliance with European regulations. Technically, the website is modern, fast, and mobile-optimized, leveraging popular JavaScript libraries and tracking tools such as Google Tag Manager and Bing Ads. The presence of cookie consent mechanisms and structured data indicates a mature digital presence with good SEO and privacy compliance. The company uses multiple social media channels for marketing and customer engagement. From a security perspective, LWS demonstrates strong practices including HTTPS enforcement, daily backups, and ISO 27001 certification. However, explicit security headers and a public vulnerability disclosure policy are not evident, which could be improved. The WHOIS data is not publicly available, likely due to privacy protection, but this is consistent with the company's profile and does not raise immediate concerns. Overall, LWS presents a trustworthy and professional web hosting service with a strong focus on the French market. The website quality, business credibility, and security posture are solid, making it a reliable choice for individuals and businesses seeking hosting solutions in France.

N

Netim

netim.com

76

Netim is a well-established ICANN-accredited domain registrar founded in 2004, offering a broad portfolio of over 1,300 TLDs including ccTLDs. The company provides domain registration, transfer services, email hosting, SSL certificates, and reseller and affiliate programs targeting individuals, SMEs, agencies, and corporations globally. The website demonstrates a professional and user-friendly design with clear navigation and relevant content tailored to its audience. Technically, the site uses modern frameworks such as Bootstrap and integrates analytics tools like Matomo and Cloudflare Insights, ensuring moderate performance and good mobile optimization. Security features include HTTPS, 2FA, login alerts, and DNSSEC support, although explicit security headers are not detected. Privacy compliance is supported by a comprehensive privacy policy and GDPR adherence, but lacks a visible cookie consent mechanism. WHOIS data for the domain is missing or inaccessible, which is unusual and warrants further verification, though the overall legitimacy is supported by the company's market presence and trust signals. Overall, Netim presents a credible and secure platform for domain and hosting services with room for minor improvements in security headers and privacy mechanisms.

O

Domain Name News, Publications and Services

onlinestrat.com

51

OnlineStrat.com is a niche website dedicated to providing news, resources, and tools related to the domain name industry. It targets domain investors, industry professionals, and enthusiasts by offering directories of key players, market studies, publications, and event information. The site positions itself as a resource hub within the domain name ecosystem, focusing on education and industry insights. Technically, the website employs a standard modern web stack including Bootstrap for responsive design, jQuery, and various JavaScript libraries for UI enhancements. It integrates third-party services such as Brevo (Sendinblue) for forms and Statcounter for analytics. The site is served over HTTPS, ensuring basic transport security, but lacks advanced security headers and comprehensive privacy or cookie policies. From a security perspective, the site shows moderate maturity with no visible vulnerabilities or exposed sensitive data. However, the absence of privacy and cookie policies, lack of contact information, and missing WHOIS registration data reduce overall trust and compliance posture. The WHOIS data is notably absent, which raises concerns about domain legitimacy and transparency. Overall, the website is functional, professionally designed, and content-rich for its niche. However, it would benefit from improved privacy compliance, enhanced security headers, and clearer business contact information to strengthen trust and regulatory adherence.

N

Rendez-vous annuels des professionnels des noms de domaine

nddcamp.fr

43

NDDCamp.fr is a professional event website dedicated to domain name industry professionals, organizing three annual meetings in Paris, Rennes, and Strasbourg. The site provides detailed information about upcoming events, speakers, organizers, and partners, positioning itself as a niche event organizer with strong industry connections and recognized experts. The technical infrastructure is based on common web technologies such as Bootstrap and jQuery, with moderate performance and good mobile optimization. Security posture is limited due to lack of visible security headers and unknown SSL configuration. Privacy compliance is minimal with no explicit cookie consent mechanism and only a basic privacy/legal mention page. The absence of WHOIS data is a significant concern for domain legitimacy and trust, although the website content and partnerships partially mitigate this risk. Overall, the site is professional and safe but would benefit from improved security and compliance measures.

A

ATX-DYNO LTD.

atx-dyno.com

55

ATX-DYNO LTD. is a Czech-based manufacturing company founded in 2015 specializing in precision metrological devices and control systems integration for automotive and agricultural machinery sectors. The company serves notable clients such as New Holland, John Deere, and Fendt, positioning itself as a niche player with customized dynamometer solutions. The website is professionally designed, mobile-optimized, and provides comprehensive contact information, including multiple physical locations and social media presence. Technically, the site uses modern frameworks like Bootstrap and integrates marketing and analytics tools such as Google Tag Manager and Pipedrive CRM forms. Security posture is adequate with HTTPS enforced and cookie consent implemented, but lacks advanced security headers and published security policies. WHOIS data is unavailable, which reduces domain trustworthiness, though website content and business information appear legitimate. Overall, the site scores well on content quality and business credibility but should improve privacy transparency and security practices.

T

Truckecopower LTD.

truckecopower.cz

53

Truckecopower LTD. operates a specialized business focused on software tuning and optimization services for heavy vehicles such as trucks and buses, aiming to reduce operational costs and improve engine performance. The company offers a comprehensive suite of services including engine software modifications, GPS-based vehicle monitoring, driver training for economical driving, and particulate filter cleaning. Their market position is that of a niche provider within the transportation sector in the Czech Republic, targeting fleet operators and commercial vehicle owners. Technically, the website is built on a modern stack utilizing HTML5, CSS3, Bootstrap, and jQuery, with integrations for Google Tag Manager, Facebook Pixel, and Pipedrive forms for lead capture. The site is mobile-optimized and demonstrates good SEO practices, although some improvements in accessibility and security headers could be made. Privacy compliance is well addressed with a clear privacy policy, cookie consent banner, and GDPR adherence. From a security perspective, the site enforces HTTPS and employs consent management for cookies, but lacks explicit security policies or incident response information. No critical vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data limits domain trust assessment, but the website content and external partner references support legitimacy. Overall, the website presents a professional and trustworthy front for a small specialized business with moderate technical maturity and good privacy compliance. Strategic improvements in security headers and domain registration transparency would enhance trust and security posture.

A

Agroecopower LIMITED - pobočka

agroecopower.cz

53

Agroecopower LIMITED is a specialized company operating primarily in the Czech Republic since 2004, focusing on software tuning and performance optimization for agricultural and forestry machinery. Their services include ECU remapping and software modifications to increase power and reduce operational costs for tractors, harvesters, sprayers, and other machinery. The company maintains a professional online presence with a well-structured website, multiple country-specific domains, and active social media channels. Technically, the website uses modern web technologies including Bootstrap, jQuery, and integrates marketing and analytics tools such as Google Tag Manager and Facebook Pixel. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, although some security headers and explicit security policies are missing. The absence of WHOIS data limits domain trust assessment, but the website content and contact information support legitimacy. Overall, the company appears credible with a focused business model serving agricultural machinery clients.

X

XTUNING s.r.o.

dpf-xtuning.cz

49

XTUNING s.r.o. operates the website dpf-xtuning.cz, providing specialized cleaning services for diesel particulate filters (DPF) primarily targeting vehicle owners with diesel engines in the Czech Republic. The company positions itself as a niche service provider focusing on emission compliance and vehicle inspection readiness through professional DPF cleaning. The website is well-structured, with clear service descriptions and a professional design that supports user engagement and conversion via contact forms and ordering options. The business model revolves around service delivery with partnerships in related automotive performance sectors.

The website 'La Grande Motte Architecture' is an informational and cultural tourism platform dedicated to the architectural heritage of La Grande Motte, France, focusing on the work of architect Jean Balladur. It serves a niche audience interested in architecture, history, and tourism, providing detailed historical context, guided tours, and event information. The site is professionally designed using WordPress with the Avada theme and Fusion Builder, and it is hosted by OVH sas. The technical infrastructure includes modern web technologies and SEO optimizations, but performance is moderate and accessibility is basic. Security posture is adequate with HTTPS enabled but lacks important security headers and DNSSEC. Privacy compliance is weak due to the absence of privacy and cookie policies. Overall, the site is trustworthy and legitimate, with consistent WHOIS data and no blocking mechanisms detected.

N

NDDCamp

nddcamp.com

50

NDDCamp is a specialized event organizer hosting domain name conferences three times annually in Paris, Strasbourg, and Rennes, France. The website positions itself as a leading domain name event in France and one of the most important in Europe, targeting professionals such as registrars, lawyers, SEO consultants, and domain investors. The business model revolves around event organization and networking within the domain name industry. The site content is professional and consistent with the business purpose, featuring partnerships with reputable domain industry organizations and sponsors.

The website domstocks.asia operates as a specialized platform offering expired domain names primarily for SEO purposes. It targets SEO professionals, website builders, and link sellers, providing a curated selection of domains with good SEO metrics and no spam history. The business model focuses on fixed low pricing without auctions, aiming to serve a broad international clientele, especially in France and Spain. The site content is presented mainly in Chinese with some French, reflecting a multilingual approach to reach diverse markets. Technically, the site uses modern front-end frameworks such as Bootstrap and Material Design Bootstrap, ensuring a responsive and visually appealing user experience. However, the site lacks a CMS indication and detailed hosting information. Security-wise, HTTPS is enabled but lacks advanced security headers and policies, and no incident response or vulnerability disclosure information is provided. The absence of privacy and cookie policies indicates compliance gaps, particularly regarding GDPR. WHOIS data is unavailable due to malformed queries, limiting trust and transparency regarding domain registration details. Overall, the site is functional and professional but requires improvements in security, privacy compliance, and transparency to enhance trust and reduce risk.

O

Office de Tourisme de La Grande Motte

lagrandemotte.com

42

La Grande Motte's official tourism website provides comprehensive information and services for visitors including accommodation booking, activity reservations, and event details. The site targets tourists and business travelers, positioning itself as a key local tourism authority with a strong digital presence. Technically, the site is built on WordPress with modern plugins and integrates Google Analytics for tracking. The site is well-designed, mobile-optimized, and offers a good user experience. Security posture is adequate with HTTPS and cookie consent, but lacks visible security headers and a published privacy policy. WHOIS data is missing, which raises some concerns about domain registration transparency. Overall, the site is trustworthy and professional but could improve compliance and security transparency.

S

Sencyb

miniurl.be

45

MiniUrl.be is a French-language URL shortening service operated by Online sas since 2010, providing users with a free and simple way to shorten and share URLs. The website is well-established with a consistent brand presence and offers additional features such as QR code generation and an API for webmasters. The business model relies on advertising revenue and voluntary donations via PayPal. Technically, the site uses modern frontend technologies including Bootstrap and jQuery, integrates Google Analytics and Adsense for tracking and monetization, and implements a GDPR-compliant cookie consent mechanism. Security posture is adequate with HTTPS enforced, but could be improved by adding advanced security headers and publishing explicit security policies. No direct contact information is provided, which may impact user trust. Overall, the site is functional, compliant with privacy regulations, and serves a niche audience effectively.

M

Mairie de Saint-Hilaire-de-Brethmas

shb-bota.fr

52

The website shb-rando.fr serves as an informational and community resource for the commune of Saint-Hilaire-de-Brethmas in France, focusing on heritage, sports, biodiversity, and geology trails. It targets families, hikers, cyclists, and nature enthusiasts, providing detailed trail information, interactive maps, and local cultural content. The site is positioned as a local government or community service platform, supported by municipal and regional partners. Technically, the site is built on WordPress with common plugins such as WooCommerce, Yoast SEO, and WPBakery, hosted by OVH. It uses modern web technologies and is mobile-optimized with embedded OpenStreetMap maps for enhanced user experience. Security posture is moderate with HTTPS enabled and domain transfer protections, but lacks explicit security headers and privacy/cookie policies, which are compliance gaps. Analytics usage includes Google Analytics via Site Kit, with moderate user tracking. Overall, the site is professional, trustworthy, and serves its community well but should improve privacy compliance and security headers to enhance trust and regulatory adherence.

X

XTUNING LTD. - pobočka

xtuning.cz

50

XTuning is a professional automotive tuning company specializing in chip tuning services for passenger cars, agricultural machinery, and trucks. Established since 1999, the company operates primarily in the Czech Republic and neighboring countries, offering performance optimization and fuel consumption reduction services. The website reflects a mature digital presence with certifications from the Ministry of Transport and TÜV SÜD, enhancing trust and credibility. Technically, the site uses modern frameworks like Bootstrap and integrates multiple marketing and analytics tools with proper consent mechanisms. Security posture is good with HTTPS and no visible vulnerabilities, though security headers could be improved. The absence of WHOIS data limits domain trust verification but does not detract from the professional presentation and business legitimacy. Overall, XTuning demonstrates a solid market position with clear service offerings and customer engagement channels.

S

SHEMA

shema.fr

51

SHEMA is a French regional public-private mixed economy company specializing in urban development, public facility construction, and business real estate in Normandy. It serves local authorities and economic actors with a strong regional presence and a portfolio of ongoing projects. The website reflects a professional and well-structured digital presence with clear business information and modern technology use. The technical infrastructure is based on WordPress with performance optimizations and privacy compliance mechanisms in place. Security posture is good with HTTPS and cookie consent but lacks explicit security headers and incident response contacts. WHOIS data is missing, which slightly impacts trust but the overall legitimacy is supported by the website content and contact information. Strategic recommendations include enhancing security headers, publishing a security policy, and monitoring domain registration details.

I

Institut Technologique FCBA

fcba.fr

9

Institut Technologique FCBA is a French industrial technical center specializing in forestry, cellulose, wood construction, and furniture sectors. It provides a range of services including innovation support, environmental performance evaluation, training, laboratory testing, certification, and diagnostics. The organization targets professionals in these industries and holds recognized certifications such as Qualiopi, COFRAC, and ASI, positioning itself as a reputable technical institute in France. The website is built on WordPress with Elementor and uses modern web technologies including jQuery, Bootstrap, and various UI libraries. It features a cookie consent mechanism and is mobile-optimized with good navigation and content quality. However, some images have lazy loading errors, and explicit privacy and terms of service pages are not clearly found, indicating room for improvement in compliance and user experience. Security posture is moderate with HTTPS enabled and some security best practices observed, but lacks explicit security headers and a vulnerability disclosure mechanism. No WHOIS data was retrievable, limiting domain legitimacy verification, but the website content and structure suggest a legitimate and professional organization. Overall, the website is functional, professional, and trustworthy with recommendations to enhance privacy compliance, security headers, and user experience for improved trust and regulatory adherence.

Restaurace Maxima is a small hospitality business based in the Czech Republic, specializing in traditional gastronomy with a modern twist. The website presents a professional and visually appealing interface that highlights their daily menus, event hosting, and quality culinary offerings. The business targets local customers, families, and corporate clients seeking quality dining experiences. Technically, the website uses modern front-end technologies such as Bootstrap, jQuery, and Google Tag Manager, ensuring a responsive and user-friendly experience. However, the absence of WHOIS data and privacy policy pages indicates gaps in transparency and compliance. Security posture is moderate with cookie consent implemented but lacking security headers and incident response information. Overall, the website is functional and trustworthy for its business purpose but would benefit from enhanced security and compliance documentation.

T

TAŠ STAPPA

tas-stappa.cz

47

TAŠ STAPPA is a Czech Republic based company specializing in the supply of concrete and aggregates primarily serving the Zlín region. With over 25 years of experience, it positions itself as a reliable local supplier offering concrete delivery, pumping services, and concrete plant equipment. The website reflects a medium-sized business with a clear focus on construction materials and services. Technically, the site is built on Joomla CMS using modern frameworks and libraries such as Bootstrap, jQuery, and Smart Slider 3, with integrated Google Analytics and Facebook Pixel for marketing and analytics purposes. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers and policies are not publicly documented. The absence of WHOIS data limits domain trust assessment, but the website content and business information appear professional and consistent. Overall, the site demonstrates good digital maturity and compliance with privacy regulations.

P

PURLIVE

purlive.cz

47

PURLIVE is a Czech-based certified manufacturer and supplier specializing in prefabricated construction systems primarily for family houses, modular wooden buildings, and container components. The company positions itself as a leading provider of energy-efficient and cost-effective building solutions in the Czech market. Their website reflects a professional digital presence with clear business offerings targeted at construction firms, architects, and private customers interested in modern prefabricated housing solutions. Technically, the website is built on Joomla CMS with modern frontend technologies including Bootstrap, jQuery, and Smart Slider 3, ensuring a responsive and user-friendly experience. The site integrates multiple analytics and marketing tools such as Google Analytics, Facebook Pixel, and Google Tag Manager, indicating a mature digital marketing strategy. Security-wise, the site enforces HTTPS and implements cookie consent mechanisms, but lacks visible security headers and published security policies, which could be improved. The absence of WHOIS data for the domain is a notable gap in trust verification, though the website content and structured data suggest a legitimate business. Overall, the site scores well in content quality and business credibility but should enhance privacy compliance and security transparency to strengthen trust and compliance.

U

UPSA

upsa.com

47

UPSA is a well-established French pharmaceutical company founded in 1935, specializing in self-medication products, medical devices, and nutritional supplements. It operates one of the largest pharmaceutical industrial sites in Europe and holds a strong market position as the leading manufacturer of paracetamol-based medicines in France. The website reflects a mature digital presence with multilingual support, professional design, and comprehensive content targeting patients, pharmacists, and healthcare professionals. Technically, the site is built on WordPress with modern frameworks and analytics tools, optimized for performance and mobile devices. Security posture is strong with HTTPS, bot protection, and secure forms, though explicit security headers and incident response information could be improved. Privacy compliance is well addressed with clear policies and consent mechanisms. However, the WHOIS data is missing or privacy protected, which is unusual for a company of this stature and warrants further verification. Overall, UPSA's website demonstrates a high level of professionalism, trustworthiness, and digital maturity.

NRW Partner Zoo is a consortium of 12 major zoos and animal parks in North Rhine-Westphalia, Germany, focused on conservation, education, and providing visitor benefits such as discounted entry. The website is well-structured, informative, and targets families, zoo visitors, and conservation enthusiasts. Technically, it uses modern front-end frameworks like Bootstrap and jQuery, with responsive design and conditional Google Analytics tracking respecting user consent. Security posture is moderate with cookie consent implemented and anonymized analytics, but lacks explicit security headers and incident response policies. Overall, the site is trustworthy, professional, and compliant with GDPR, with clear contact information and strong partner representation.

The website www.mairie-vallan.fr serves as the official online presence for the commune of Vallan, located in the Yonne department of Bourgogne-Franche-Comté, France. It provides residents and visitors with municipal news, administrative procedures, community services, and contact information. The site targets local citizens and stakeholders seeking information about the commune's governance and services. The business model is public service-oriented, focusing on transparency and community engagement. Technically, the website is built on a CMS solution provided by Citopia (WeeCity), utilizing technologies such as jQuery 1.10.2, Bootstrap, and FlexSlider. The site is moderately performant with good mobile optimization and basic accessibility features. SEO practices are adequately implemented with proper meta tags and Open Graph data. From a security perspective, the site enforces HTTPS but lacks visible security headers and uses an outdated jQuery version, which could expose it to vulnerabilities. There are no privacy or cookie policies present, indicating compliance gaps with GDPR. The WHOIS data is unavailable, which limits domain trust verification, though the site content and official contact details suggest legitimacy. Overall, the website is functional and professional but would benefit from updating its technical stack, enhancing security headers, and adding privacy compliance documentation to improve trust and security posture.

S

Saint-Georges-sur-Baulche

saint-georges-sur-baulche.fr

44

Saint-Georges-sur-Baulche is a French municipal government website providing comprehensive information and services to local residents, including administrative procedures, urban planning, family portals, and community news. The site serves as the official digital presence of the commune, targeting residents, families, seniors, youth, and local associations. Technically, the website is built on WordPress with modern plugins such as Yoast SEO, Bootstrap framework, and Leaflet.js for mapping, ensuring good mobile responsiveness and SEO optimization. The site employs cookie consent mechanisms and Google Analytics with user consent, reflecting a good privacy compliance posture. Security-wise, the site uses HTTPS with an excellent SSL configuration but lacks some HTTP security headers and formal security policies, indicating room for improvement. The WHOIS data is unavailable, likely due to privacy protection or registry policies, but the website content and branding strongly indicate legitimacy as an official municipal site. Overall, the site is professional, trustworthy, and well-maintained, with moderate technical performance and good user experience.

C

Commune de Champs-sur-Yonne

champs-sur-yonne.fr

54

The website champs-sur-yonne.fr serves as the official digital portal for the municipal government of Champs-sur-Yonne, France. It provides residents and visitors with essential information including local news, administrative procedures, municipal services, and contact details. The site is positioned as a trusted local government resource, focusing on transparency and community engagement. The business model is public service oriented, with no commercial activities evident. The website is well-branded and consistent with the identity of a small municipal entity founded in 2014. Technically, the site employs a modern technology stack including Bootstrap, jQuery, and several carousel libraries for UI enhancement. It uses hCaptcha for form protection and a cookie consent management tool (tarteaucitron.js) to comply with privacy regulations. Hosting is provided by OVH, a reputable French hosting provider. The site demonstrates good mobile optimization and SEO practices, though accessibility features are basic. From a security perspective, the site enforces HTTPS and uses hCaptcha to mitigate spam on contact forms. However, it lacks visible HTTP security headers such as CSP or HSTS, and does not publish explicit security or incident response policies. No vulnerabilities or exposed sensitive data were detected in the HTML content. Privacy compliance is supported by a clear privacy policy and cookie consent mechanism, aligned with GDPR requirements. Overall, the website presents a low-risk profile with a solid foundation for public sector communication. Strategic improvements include enhancing security headers, publishing incident response information, and expanding accessibility compliance. These steps would strengthen the site's security posture and trustworthiness further.

A

ANCV Cheque-Vacances

cheque-vacances.com

57

ANCV Cheque-Vacances operates a well-established French government-backed program providing holiday vouchers to individuals and organizations, facilitating access to tourism, leisure, and cultural activities. The website reflects a mature digital presence with a strong brand, extensive partner network, and multiple user segments including public agents, enterprises, and tourism professionals. Technically, the site is built on WordPress with modern plugins and frameworks, optimized for SEO and mobile use, though some accessibility and security header improvements are recommended. Security posture is solid with HTTPS and bot protection, but lacks some advanced DNS and header configurations. Privacy compliance is minimal on the homepage, with no visible privacy or cookie policies, which should be addressed to meet GDPR standards. Overall, the domain registration and WHOIS data confirm legitimacy and consistency with the business claims.

S

SELA Immo

sela-immo.fr

50

SELA Immo is a regional real estate company specializing in the sale and rental of land, houses, and apartments primarily in the Loire-Atlantique region of France. The website serves both individual consumers and professional clients, offering property listings, advice, and partnership opportunities with construction companies. The company positions itself as a trusted local real estate developer with a focus on sustainable and community-oriented projects. Technically, the website is built on WordPress with common plugins such as Yoast SEO and Google Analytics, providing a modern and responsive user experience. However, some technical improvements are possible, including better security header implementation and full configuration of analytics tools. Security posture is adequate with HTTPS enforced and cookie consent mechanisms in place, but lacks explicit security policies and incident response information. The absence of WHOIS data for the domain reduces trustworthiness and warrants further investigation. Overall, the website is professional, content-rich, and compliant with GDPR privacy requirements, making it a credible platform for real estate services in its market niche.

L

Le Tambour

assoletambour.com

52

Le Tambour is a French non-profit cultural association founded in 2001, dedicated to literary diffusion by connecting literature with other art forms. The organization offers writing workshops, public readings, theatrical performances, and text montages aimed at diverse audiences including schools and urban communities. The website reflects a professional and consistent brand presence with clear contact information and regional partnerships. Technically, the site is built on WordPress with common plugins and hosted by OVH sas, showing moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled and domain protections, but lacks DNSSEC and security headers. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the site is trustworthy and safe for general audiences.

H

Horizon Project Management

hpmgroupe.com

43

Horizon Project Management (HPM) is a Moroccan-based engineering and project management company specializing in construction project oversight, technical studies, and consultancy services. Established in 2010 and now part of the Ingérop group, HPM serves both private and public sector clients, focusing on real estate, hospitality, transportation, and industrial sectors. The company offers key services including project management assistance, delegated project management, and technical project execution. Their website reflects a professional presence with clear service offerings and client references, targeting construction developers and project owners primarily in Morocco and Africa. Technically, the website employs modern frontend technologies such as jQuery, Bootstrap, and Google Maps API, hosted by OVH sas. While the site is mobile-optimized and well-structured, some technical issues like a Google Maps loading error and lack of advanced security headers are noted. Security posture is moderate with HTTPS enabled but missing DNSSEC and security headers. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the domain registration data aligns well with the business profile, indicating legitimacy and trustworthiness.

L

La C'ART

lacart.fr

44

La C'ART is a cultural subscription service offering access to 15 museums and art centers in the Lille metropolitan area, targeting residents and visitors interested in arts and culture. The website is well-branded, professionally designed, and provides comprehensive information about the pass, events, and partner institutions. Technically, the site uses modern web technologies including Bootstrap, jQuery, and integrates analytics tools like Matomo and Facebook Pixel. It is mobile-optimized and includes accessibility features, although some security headers could be improved. The security posture is solid with HTTPS enforced and cookie consent mechanisms in place, but lacks explicit security policies or vulnerability disclosure information. WHOIS data is missing, which reduces domain trust from a registration perspective, but the website content and external references indicate legitimacy. Overall, the site is a reliable and professional platform for cultural engagement in Lille.

E

E-BAAN,SE

hapra.cz

49

HAPRA Design is a Czech digital agency specializing in web design, e-commerce development, SEO, social media management, and online marketing services. With over 20 years of experience, the company offers comprehensive digital solutions aimed at businesses seeking to enhance their online presence. Their service portfolio includes website and e-shop creation, content management, PPC advertising, and technical maintenance, positioning them as a full-service digital partner. The website reflects a professional and consistent brand image with clear navigation and relevant content tailored to their target audience. Technically, the site employs a modern technology stack including PHP, MySQL, JavaScript libraries such as jQuery, Bootstrap framework, and integrates marketing and analytics tools like Google Tag Manager and Facebook SDK. The site is mobile-optimized and uses a custom CMS named publishWEB. Performance is moderate with good SEO practices and basic accessibility features. From a security perspective, the website enforces HTTPS and includes a cookie consent mechanism aligned with GDPR requirements. However, no explicit security headers were detected, and no public security or incident response policies are available. The WHOIS data is missing, which limits domain trust verification, but the website content and business information appear legitimate and professional. Overall, the site scores well on content quality, technical implementation, privacy compliance, and business credibility, with recommendations to enhance security headers, publish security policies, and improve accessibility compliance to further strengthen their security posture and trustworthiness.